Cisco AVC ART Configuration

You can perform Cisco AVC ART configuration using the following steps:

flow exporter NFA
destination {NETFLOW_SERVER_IP}
source {LOOPBACK_INTERFACE_NAME}
output-features
transport udp {NETFLOW_SERVER_LISTENER_PORT}
export-protocol netflow-v9
template data timeout 60
option interface-table
option application-table
option application-attributes
option metadata-version-table

class-map match any NFA_ART
match any

flow record type mace NFA
collect ipv4 dscp
collect interface input
collect interface output
collect application name
collect counter client bytes
collect counter server bytes
collect counter client packets
collect counter server packets
collect art all

flow record type performance-monitor NFA_NBAR
match ipv4 tos
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match interface input
match interface output
match flow direction
match application name
collect datalink dot1q vlan input
collect datalink dot1q vlan output
collect routing destination as
collect routing next-hop address ipv4
collect ipv4 dscp
collect ipv4 id
collect ipv4 source prefix
collect ipv4 source mask
collect ipv4 destination mask
collect transport tcp source-port
collect transport tcp destination-port
collect transport tcp flags
collect transport udp source-port
collect transport udp destination-port
collect counter bytes
collect counter packets
collect timestamp sys-uptime first
collect timestamp sys-uptime last

flow monitor type performance-monitor NFA
record NFA_NBAR
exporter NFA
cache timeout active 60

flow monitor type mace NFA-ART
record NFA
exporter NFA

policy-map type performance-monitor NFA
class class-default
flow monitor NFA

policy-map type mace mace_global
class NFA_ART
flow monitor NFA_ART

Enter global configuration mode on the router or MSFC, and issue the following commands for each interface on which you want to enable flow:

interface {INTERFACE_NAME}
service-policy type performance-monitor input NFA
service-policy type performance-monitor output NFA
mace enable